Handbook

What the law says, block by block, jurisdiction by jurisdiction.

Ten blocks per jurisdiction, the same ten every time, so the comparison below is generated from the pages rather than written beside them. Each block carries its primary sources, and a block that carries none says so.

Updated 6 Sep 2026
European Union
The baseline every other record in the Handbook is measured against: Articles 12 and 15 of the General Data Protection Regulation, and what the Court of Justice has held they mean.
Reviewed 6 Sep 2026Read the record

Compared

The four blocks a request turns on first. The other six are on each record's own page.

Jurisdiction	Deadline and extension	Fees and refusal	The copy	Other people and their data
European Union	One month from receipt, extendable by two further months for complexity or number of requests.	Free of charge. A fee or a refusal only for a manifestly unfounded or excessive request, and the controller carries the burden of showing it is one.	A faithful and intelligible reproduction of the personal data, which can require whole documents where context is what makes the data intelligible.	Article 15(4): the copy must not adversely affect the rights and freedoms of others, and Recital 63 says that is not a ground to withhold everything.

What the law says, block by block, jurisdiction by jurisdiction.

European Union